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1 OpenLDAP everywhere 
Craig Swanson , Matt Lung 
Linux Journal December 2002 
Volunne 2002 Issue 104 

A single company-wide directory service offers mail address lookup and file sharing to Linux and 
Windows users. 
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2 RFC2307: An Approach for Using LDAP as a Network Infornnation Service 77% 

1^ L. Howard 

rfc, RFC Editor March 1998 

This document describes an experimental mechanism for mapping entities related to TCP/IP and 
the UNIX system into X.500 [X500] entries so that they may be resolved with the Lightweight 
Directory Access Protocol [RFC2251]. A set of attribute types and object classes are proposed, 
along with specific guidelines for interpreting them. 
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1 RFC2251: Lightweight Directory Access Protocol (v3) 

13 M. Wahl , T. Howes , S. Kille 
rfc, RFC Editor Decennber 1997 

The protocol described in this document is designed to provide access to directories supporting 
the X.500 models, while not incurring the resource requirements of the X.500 Directory Access 
Protocol (DAP). This protocol is specifically targeted at management applications and browser 
applications that provide read/write interactive access to directories. When used with a directory 
supporting the X.500 protocols, it is intended to be a complement to the X.500 DAP. 
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2 RFC2828: Internet Security Glossary 
R. Shirey 

rfc, RFC Editor May 2000 

This Glossary (191 pages of definitions and 13 pages of references) provides abbreviations, 
explanations, and recommendations for use of information system security terminology. The 
intent is to improve the comprehensibility of writing that deals with Internet security, 
particularly Internet Standards documents (ISDs), To avoid confusion, ISDs should use the same 
term or definition whenever the same concept is mentioned. To improve international 
understanding, ISDs should use te ... 
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3 RFC1421: Privacy Enhancement for Internet Electronic Mail: Part I 
[3 J. Linn 

rfc, RFC Editor February 1993 
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4 RFC3300: Internet Official Protocol Standards 

@| J. Reynolds , R. Braden , S. Ginoza , A. De La Cruz 
rfc, RFC Editor November 2002 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 24, 2002. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 
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(3 J. Reynolds , R. Braden , S. Ginoza , L Shiota 
rfc, RFC Editor November 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 25, 2001. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 



6 RFC2900: Internet Official Protocol Standards 77% 

J. Reynolds , R. Braden , S. Ginoza 

rfc, RFC Editor August 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of July 17, 2001. It lists official protocol standards and Best Current Practice RFCs; it is not a 
complete index to the RFC series. The latest version of this memo is designated STD 1. 



7 RFC2800: Internet Official Protocol Standards 77% 

J. Reynolds , R. Braden , S. Ginoza 

rfc, RFC Editor May 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of April 17, 2001. It lists only official protocol standards RFCs; it is not a complete index to 
the RFC series. The latest version of this memo is designated STD 1. 



8 RFC2700: Internet Official Protocol Standards 77% 

J. Reynolds , R. Braden 

rfc, RFC Editor August 2000 

This memo describes the current state of standardization of protocols used in the Internet as 
determined by the Internet Engineering Task Force (IETF). Sections 3.1 - 3.6 contain the lists of 
protocols in each stage of standardization - Standard, Draft Standard, Proposed Standard, 
Experimental and Historic. Protocols that are new to this document or have been moved from 
one protocol level to another, or differ from the previous edition of this document are marked. 
Informationa ... 



9 RFC2600: Internet Official Protocol Standards 77% 
1^ J. Reynolds , R. Braden 
rfc, RFC Editor March 2000 



10 RFC1700: Assigned Numbers 77% 
J. Reynolds , J. Postel 
rfc, RFC Editor October 1994 



11 RFC1422: Privacy Enhancennent for Internet Electronic Mail: Part II 77% 
13 S. Kent 

rfc, RFC Editor February 1993 



12 Adapting globus and kerberos for a secure ASCI grid 77% 
Patrick C. Moore , Wilbur R. Johnson , Richard J. Detry 

Proceedings of the 2001 ACM/IEEE conference on Supercomputing (CDROM) November 2001 

Porting a complex secure application from one security infrastructure to another is often difficult 
or impractical. Grid security associated with the Globus toolkit is supported by a Grid Security 
Infrastructure (GSI) based on a Public Key Infrastructure where users authenticate to the grid 
using X509 certificates. Kerberos security is based on a trusted third party, secret key 
infrastructure where users authenticate using encrypted tickets. However, both GSI and 
Kerberos provide a Generic Secur ... 
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1 RFC2828: Internet Security Glossary 85% 

13 R. Shirey 

rfc, RFC Editor May 2000 

This Glossary (191 pages of definitions and 13 pages of references) provides abbreviations, 
explanations, and recomnnendations for use of information system security terminology. The 
intent is to improve the comprehensibility of writing that deals with Internet security, 
particularly Internet Standards documents (ISDs). To avoid confusion, ISDs should use the same 
term or definition whenever the same concept is mentioned. To improve international 
understanding, ISDs should use te ... 



2 RFC2626: The Internet and the jvjiiiennium Problem (Year 2000) 80% 
P. Nesser 

rfc, RFC Editor June 1999 

The Year 2000 Working Group (WG) has conducted an investigation into the millennium problem 
as it regards Internet related protocols. This investigation only targeted the protocols as 
documented in the Request For Comments Series (RFCs). This investigation discovered little 
reason for concern with regards to the functionality of the protocols. A few minor cases of older 
implementations still using two digit years (ala RFC 850) were discovered, but almost all 
Internet protocols ... 



3 RFC2251: Lightweight Directory Access Protocol (v3) 80% 

3 M. Wahl , T. Howes , S. Kille 
rfc, RFC Editor December 1997 

The protocol described in this document is designed to provide access to directories supporting 
the X.500 models, while not incurring the resource requirements of the X.500 Directory Access 
Protocol (DAP). This protocol is specifically targeted at management applications and browser 
applications that provide read/write interactive access to directories. When used with a directory 
supporting the X.500 protocols, it is intended to be a complement to the X.500 DAP. 
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@| S. Crocker , N. Freed , J. Galvin , S. Murphy 
• rfc, RFC Editor October 1995 

This document defines MIME Object Security Services (MOSS), a protocol that uses the 
multipart/signed and multipart/encrypted framework [7] to apply digital signature and 
encryption services to MIME objects. The services are offered through the use of end-to-end 
cryptography between an originator and a recipient at the application layer. Asymmetric (public 
key) cryptography is used in support of the digital signature service and encryption key 
management. Symmetric (secret key ... 

5 RFC1499: Sunnmary of 1400-1499 80% 
Q J. Elliott 

rfc, RFC Editor January 1997 

6 RFC3300: Internet Official Protocol Standards 77% 
J. Reynolds , R. Braden , S. Ginoza , A. De La Cruz 

rfc, RFC Editor November 2002 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 24, 2002. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 

7 RFC3126: Electronic Signature Formats for long ternn electronic signatures 77% 
D. Pinkas , J. Ross , N. Pope 

rfc, RFC Editor September 2001 

This document defines the format of an electronic signature that can remain valid over long 
periods. This includes evidence as to its validity even if the signer or verifying party later 
attempts to deny (i.e., repudiates the validity of the signature). 

8 RFC3000: Internet Official Protocol Standards 77% 
J. Reynolds , R. Braden , S. Ginoza , L. Shiota 

rfc, RFC Editor November 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 25, 2001. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 

9 RFC2900: Internet Official Protocol Standards 77% 
J. Reynolds , R. Braden , S. Ginoza 

rfc, RFC Editor August 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of July 17, 2001. It lists official protocol standards and Best Current Practice RFCs; it is not a 
complete index to the RFC series. The latest version of this memo is designated STD 1. 

10 RFC2800: Internet Official Protocol Standards 77% 
[2| J. Reynolds , R. Braden , S. Ginoza 

rfc, RFC Editor May 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of April 17, 2001. It lists only official protocol standards RFCs; it is not a complete index to 
the RFC series. The latest version of this memo is designated STD 1. 

11 RFC2700: Internet Official Protocol Standards 77% 
J. Reynolds , R. Braden 

rfc, RFC Editor August 2000 

This memo describes the current state of standardization of protocols used in the Internet as 
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determined by the Internet Engineering Task Force (IETF). Sections 3.1 - 3.6 contain the lists of 
protocols in each stage of standardization - Standard, Draft Standard, Proposed Standard, 
Experimental and Historic. Protocols that are new to this document or have been moved from 
one protocol level to another, or differ from the previous edition of this document are marked. 
Informationa ... 

12 RFC2600: Internet Official Protocol Standards 77% 
J. Reynolds , R. Braden 

rfc, RFC Editor March 2000 

13 RFC2510: Internet X.509 Public Key Infrastructure Certificate Managennent Protocols 77% 
(5 C. Adams , S. Farrell 

rfc, RFC Editor March 1999 

This document describes the Internet X.509 Public Key Infrastructure (PKI) Certificate 
Management Protocols. Protocol messages are defined for all relevant aspects of certificate 
creation and management. Note that "certificate" in this document refers to an X.509v3 
Certificate as defined in [COR95, X509-AM]. 

14 RFC2408: Internet Security Association and Key Managennent Protocol (ISAKMP) 77% 
D. Maughan , M. Schertler , M. Schneider , 3. Turner 

rfc, RFC Editor November 1998 

This memo describes a protocol utilizing security concepts necessary for establishing Security 
Associations (SA) and cryptographic keys in an Internet environment. A Security Association 
protocol that negotiates, establishes, modifies and deletes Security Associations and their 
attributes is required for an evolving Internet, where there will be numerous security 
mechanisms and several options for each security mechanism. The key management protocol 
must be robust in order to ... 

15 RFC2300: Internet Official Protocol Standards 77% 
[3 J. Postel 

rfc, RFC Editor May 1998 

16 RFC2156: MIXER (Mime Internet X.400 Enhanced Relay): Mapping between X.400 and RFC 77% 
(2l 822/MIME 

S. Kille 

rfc, RFC Editor January 1998 

17 RFC1799: Request for Comments Summary RFC Numbers 1700-1799 77% 
M. Kennedy 

rfc, RFC Editor January 1997 

18 RFC1780: Internet Official Protocol Standards 77% 
(3 rfc, RFC Editor March 1995 

19 RFC1700: Assigned Numbers 77% 
[3 J. Reynolds , J. Postel 

rfc, RFC Editor October 1994 

20 RFC1636: Report of lAB Workshop on Security in the Internet Architecture - February 8-10, 77% 
(3 1994 
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R. Braden , D. Clark , S. Crocker , C. Huitema 

rfc, RFC Editor June 1994 

This document is a report on an Internet architecture workshop, initiated by the lAB and held at 
use Information Sciences Institute on February 8-10, 1994. This workshop generally focused on 
security issues in the Internet architecture. 
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21 RFC1507: DASS - Distributed Authentication Security Service 77% 
C. Kaufman 

rfc, RFC Editor September 1993 

22 RFC1500: Internet Official Protocol Standards 77% 
1^ J. Postel 

rfc, RFC Editor August 1993 

23 RFC1422: Privacy Enhancennent for Internet Electronic Mail: Part II 77% 
3 S. Kent 

rfc, RFC Editor February 1993 

24 Programming the Grid: Distributed Software Components, P2P and Grid Web Services for 77% 
3 Scientific Applications 

Dennis Gannon , Randall Bramley , Geoffrey Fox , Shava Smallen , Al Rossi , Rachana 

Ananthakrishnan , Felipe Bertrand , Ken Chiu , Matt Farrellee , Madhu Govindaraju , Sriram 

Krlshnan , Lavanya Ramakrishnan , Yogesh Simmhan , AIek Slominski , Yu Ma , Caroline Olariu , 

Nicolas Rey-Cenvaz 

Cluster Computing July 2002 

Volume 5 Issue 3 

Connputational Grids [17,25] have become an important asset in 
large-scale scientific and engineering research. By providing a set of 
services that allow a widely distributed collection of resources to be tied 
together into a relatively seamless computing framework, teams of 
researchers can collaborate to solve problems that they could not have 
attempted before. Unfortunately the task of building Grid applications 
remains extremely difficult because there are few tools available to 
suDDort dev 
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25 A Jini-based computing portal system 77% 
Toyotaro Suzumura , Satoshi Matsuoka , Hidemoto Nakada 

Proceedings of the 2001 ACM/IEEE conference on Supercomputing (CDROM) November 2001 
JiPANG(A Jini-based Portal Augmenting Grids) is a portal system and a toolkit which provides 
uniform access interface layer to a variety of Grid systems, and is built on top of Jini distributed 
object technology. JiPANG performs uniform higher-level management of the computing services 
and resources being managed by individual Grid systems such as Ninf, NetSolve, Globus, etc. In 
order to give the user a uniform interface to the Grids JiPANG provides a set of simple Java APIs 
called the JiPANG To ... 



26 A secure execution framework for Java 77% 
Manfred Hauswirth , Clemens Kerer , Roman Kurmanowytsch 

Proceedings of the 7th ACM conference on Computer and communications security November 2000 
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1 Loading data into description reasoners 77% 
1^ Alex Borgida , Ronald J. Brachman 

ACM SIGMOD Record , Proceedings of the 1993 ACM SIGMOD international conference on 

Management of data June 1993 

Volume 22 Issue 2 

Knowledge-base management systems (KBMS) based on description logics are being used in a 
variety of situations where access is needed to large amounts of data stored in existing relational 
databases. We present the architecture and algorithms of a system that converts most of the 
inferences made by the KBMS into a collection of SQL queries, thereby relying on the 
optimization facilities of existing DBMS to gain efficiency, while maintaining an object-centered 
view of the world with a substa ... 
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1 RFC2828: Internet Security Glossary 

Q R. Shirey 

rfc, RFC Editor May 2000 

This Glossary (191 pages of definitions and 13 pages of references) provides abbreviations, 
explanations, and recommendations for use of information system security terminology. The 
intent is to improve the comprehensibility of writing that deals with Internet security, 
particularly Internet Standards documents (ISDs). To avoid confusion, ISDs should use the same 
term or definition whenever the same concept is mentioned. To improve international 
understanding, ISDs should use te ... 
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2 RFC1848: MIME Object Security Services 

S. Crocker , N. Freed , J. Galvin , S. Murphy 

rfc, RFC Editor October 1995 

This document defines MIME Object Security Services (MOSS), a protocol that uses the 
multipart/signed and multipart/encrypted framework [7] to apply digital signature and 
encryption services to MIME objects. The services are offered through the use of end-to-end 
cryptography between an originator and a recipient at the application layer. Asymmetric (public 
key) cryptography is used in support of the digital signature service and encryption key 
management. Symmetric (secret key ... 
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3 RFC3300: Internet Official Protocol Standards 

J. Reynolds , R. Braden , S. Ginoza , A. De La Cruz 

rfc, RFC Editor November 2002 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 24, 2002. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 
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4 RFC3126: Electronic Signature Fornnats for long term electronic signatures 

12 D. Pinkas , J. Ross , N. Pope 
rfc, RFC Editor September 2001 

This document defines the format of an electronic signature that can remain valid over long 
periods. This includes evidence as to its validity even if the signer or verifying party later 
attempts to deny (i.e., repudiates the validity of the signature). 
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5 RFC3000: Internet Official Protocol Standards 77% 

J. Reynolds , R. Braden , S. Ginoza , L. Shiota 

rfc, RFC Editor November 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of October 25, 2001. It lists official protocol standards and Best Current Practice RFCs; it is 
not a complete index to the RFC series. The latest version of this memo is designated STD 1. 



6 RFC2900: Internet Official Protocol Standards 77% 

J. Reynolds , R. Braden , S. Ginoza 

rfc, RFC Editor August 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of July 17, 2001. It lists official protocol standards and Best Current Practice RFCs; it is not a 
complete index to the RFC series. The latest version of this memo is designated STD 1. 



7 RFC2800: Internet Official Protocol Standards 77% 

1^ J. Reynolds , R. Braden , S. Ginoza 
rfc, RFC Editor May 2001 

This memo contains a snapshot of the state of standardization of protocols used in the Internet 
as of April 17, 2001. It lists only official protocol standards RFCs; it is not a complete index to 
the RFC series. The latest version of this memo is designated STD 1. 



8 RFC2626: The Internet and the Millennium Problem (Year 2000) 77% 
P. Nesser 

rfc, RFC Editor June 1999 

The Year 2000 Working Group (WG) has conducted an Investigation into the millennium problem 
as it regards Internet related protocols. This investigation only targeted the protocols as 
documented in the Request For Comments Series (RFCs). This investigation discovered little 
reason for concern with regards to the functionality of the protocols. A few minor cases of older 
implementations still using two digit years (ala RFC 850) were discovered, but almost all 
Internet protocols ... 

9 RFC2510: Internet X.509 Public Key Infrastructure Certificate Management Protocols 77% 
C. Adams , S. Farrell 

rfc, RFC Editor March 1999 

This document describes the Internet X.509 Public Key Infrastructure (PKI) Certificate 
Management Protocols. Protocol messages are defined for all relevant aspects of certificate 
creation and management. Note that "certificate" in this document refers to an X.509v3 
Certificate as defined in [COR95, X509-AM]. 



10 Using ontologies to index conceptual structures for tendering automation 77% 
21 Ahmad Kayed , Robert M. Colomb 

Australian Computer Science Communications , Proceedings of the thirteenth Australasian 

conference on Database technologies - Volume 5 January 2002 

Volume 24 Issue 2 

Using natural language to model the tendering makes any process associated with tendering 
automation extremely difficult. Conceptual Graph is a well-known mechanism for knowledge 
representation. We implemented our ontologies using CGs. In tendering domain, we define two 
ontologies: The Tendering Structure and the Abstract Domain Ontology. In this paper we survey 
the indexing and retrieving techniques in CG literatures. Then we build a slight modification of 
these techniques to build our own inde ... 
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11 Access Control: Design and implementation of a flexible RBAC-service in an object-oriented 77% 
(2 scripting language 

Gustaf Neumann , Mark Strembeck 

Proceedings of the 8th ACM conference on Computer and Communications Security November 2001 
In this paper we present the design and implementation of the xorbac component that provides 
a flexible RBAC service. The xorbac, implementation conforms to level 4a of the unified NIST 
model for RBAC and can be reused for arbitrary applications on Unix or Windows with a C or Tel 
linkage, xorbac runtime elements can be serialized and recreated from RDF data models 
conforming to a well-defined RDF schema. Furthermore we present our experiences with xorbac 
fort ... 



12 A secure execution framework for Java 77% 
Manfred Hauswirth , Clemens Kerer , Roman Kurmanowytsch 

Proceedings of the 7th ACM conference on Computer and communications security November 2000 
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